Freertos Plus Tcp
Approved changes feed: RSS · Atom
cpe:2.3:a:freertos:freertos-plus-tcp:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Freertos (b5a989c8-84b0-54a8-895d-f23b74cdf599) |
|---|---|
| Product | Freertos Plus Tcp (29921df8-6071-5cef-8cf8-007ee8d67e2d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-102552 |
vulnerable | 2026-11-03 10:15:44.596041 |
Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver
MEDIUM (5.9)
Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply.
To remediate this issue, users should upgrade to version V4.4.2 and enable ipconfigDNS_CHECK_REPLY_SOURCE_IP.
Published: 2026-10-16T17:28:47.578Z
Updated: 2026-10-19T12:54:33.789Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-102551 |
vulnerable | 2026-11-03 10:15:44.060229 |
Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling
HIGH (7.7)
Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router Advertisement.
To remediate this issue, users should upgrade to version V4.4.2.
Published: 2026-10-16T17:27:38.483Z
Updated: 2026-10-19T12:51:13.488Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38373 |
vulnerable | 2026-06-08 06:41:45.155652 |
FreeRTOS-Plus-TCP Buffer Over-Read in DNS Response Parser
CRITICAL (9.6)
FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the DNS Response Parser when parsing domain names in a DNS response. A carefully crafted DNS response with domain name length value greater than the actual domain name length, could cause the parser to read beyond the DNS response buffer. This issue affects applications using DNS functionality of the FreeRTOS-Plus-TCP stack. Applications that do not use DNS functionality are not affected, even when the DNS functionality is enabled. This vulnerability has been patched in version 4.1.1.
Published: 2024-06-24T16:23:00.162Z
Updated: 2024-08-02T04:04:25.337Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.